I can't find web root directory.

To hide some files I need to place these before web root directory .
But, I can't find web root directory.

Symbolic link is example.com -> /var/www/clients/client0/web2/.
But, /var/www/clients/client0/web2/web/ is showed when I accessed example.com.
Is it correct that I place security files in /var/www/clients/client0/web2/?